Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
File: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft (raw, json)
Hash identifier: v7N6h6blsM57mc1krEWaRD5tncnPIYSI5IMtzHMoZsk=
Subject key identifier: D7:3F:69:E5:D1:54:E8:B7:37:AC:83:63:8F:5E:E9:6A:95:56:3A:48
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Certificate issuer: /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial: 0194BC728135F6E0467F409C6C467A2860ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
Manifest number: 0AAF
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl (hash: 4givh6fJVzHaKbtDrmesJvBTRJPXZqDOaIemAKUQDRs=)
2: ZpPHkeZ_D9zOR1r9ddv8P5qN5Bs.roa (hash: A59UxRRGgR+JT73G/bb/9C8OAUpYZN7HTOO2tWj/3N8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:81:35:f6:e0:46:7f:40:9c:6c:46:7a:28:60:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=d73f69e5d154e8b737ac83638f5ee96a95563a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:b1:4a:1f:cf:bd:73:0e:e2:a2:bb:30:7e:
fe:e6:37:ce:2c:a5:55:c7:24:fb:f9:31:d8:3a:1b:
16:ea:27:9e:53:26:35:2e:26:24:fe:ff:d4:76:59:
09:6f:9c:9b:e6:86:a6:bb:90:b8:52:3b:fb:f5:35:
12:b2:c0:29:90:df:78:2a:76:d2:11:83:1f:70:ca:
c3:3c:fb:f6:0c:50:0e:f8:e7:33:ef:95:9f:83:47:
59:3a:a9:17:14:05:88:33:95:47:65:43:de:a4:f3:
50:15:ec:e4:44:a7:9a:a3:3c:0c:09:2e:fe:6c:70:
05:b1:8a:62:6c:10:cc:f2:05:6a:43:33:2a:b1:97:
99:05:bb:57:b6:28:33:34:2a:79:4b:31:c8:83:81:
b9:e7:2a:f5:e1:bd:01:d6:0e:38:e2:f8:a4:d5:69:
bb:79:3b:42:6c:1d:ea:a8:57:9b:8d:c8:6e:da:80:
36:56:04:26:d7:67:1e:75:89:5b:f8:af:06:da:35:
4b:55:e6:38:64:5a:23:fe:e3:d4:e7:a1:7b:51:8b:
c7:05:c4:76:89:ca:d8:0a:00:68:16:00:11:e2:98:
c7:b9:22:ff:6c:ef:01:60:96:39:be:ff:01:33:60:
d0:b1:f7:d5:97:9d:89:c9:19:3c:4b:50:a9:1b:58:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3F:69:E5:D1:54:E8:B7:37:AC:83:63:8F:5E:E9:6A:95:56:3A:48
X509v3 Authority Key Identifier:
keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4e:5c:b5:af:e1:d5:34:05:c1:76:81:a1:ca:61:37:b2:41:
06:2d:7f:88:62:a5:81:87:46:23:88:85:79:b4:af:49:aa:1e:
87:25:5d:04:7f:3a:f7:52:7a:51:52:27:ae:f4:b7:b1:43:b2:
a9:bd:62:7c:22:95:b5:1e:1c:10:3e:2a:ed:51:49:8e:39:fb:
70:7a:6b:54:05:3a:a3:c5:7b:12:1c:ec:87:52:0d:b3:ea:03:
b1:a8:77:61:02:26:9e:c5:b1:1e:66:ce:44:85:db:2a:0a:b6:
9d:a8:5f:91:4d:d2:03:02:d5:64:c7:48:0d:8d:90:05:b6:8f:
4a:2b:24:be:2f:bd:8a:f1:43:d0:76:6b:d1:d5:cd:17:6a:71:
ef:ab:0b:2b:13:7d:7e:bc:71:3a:a8:fb:8e:de:7f:a8:b7:63:
e1:3f:30:ad:a8:a3:23:aa:31:b1:3c:b4:d5:4c:33:15:ca:e7:
7e:c8:db:80:ce:4b:bb:ac:c6:e7:88:78:ae:a2:af:3a:32:ab:
0a:fd:25:73:ca:f2:42:e4:a5:41:21:4d:52:ae:28:c4:ae:d6:
86:c0:71:3d:45:60:fc:4c:6c:a5:36:7e:30:49:5d:25:1d:81:
54:4c:5c:b8:96:c1:2f:15:c5:9d:b7:e1:ae:da:f5:37:f1:18:
f0:59:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:11 2025 by rpki-client